open your internet.
click on tools, internet options.
Click on settings
click on view objects
click on all the objects in there, and remove them (using delete key)

also check your startup folder to see if there is a startup file refering to hotbar.

also if running 98 open MSCONFIG and click on startup and see if there is a path with a tick in it reffering to the hotbar location. - delete that also.

Regards

Error Message "Explorer caused an invalid page fault on module GWS.DLL @ 016f:03c68071" and most windows programs will not run (like explorer, recycle bin, My computer etc). Caused by a spyware hotbar, C:\WINDOWS\SYSTEM\GWS.DLL, GlobalWebSearch.com

this is another one of the virus type programs that falls under the category of 'spyware/scumware'. They automatically install themselves to your computer when you visit certain sites and they then in the background steal commissions from sites like mine if you ever shop from us.

This one comes from a toolbar called GlobalWebSearch.com

you will need to find and rename the file gws.dll to gws.OLD. But windows wont let you do that so you either have to do it in DOS mode by first booting with a boot disk, or if you think you can stop all the programs from running then you can rename this in windows (click the keys control Alt Delete at the same time, to bring up a list of running programs, then you can click on each program and click the button END TASK to stop each service. Stop all except system and systray.)

Then use the FIND method (Start | Find | ) to search for GWS.dll and when you find it right click on it and rename it to GWS.OLD

There is also a good chance that a file named "SBUS.dll" might be placed in the windows system (or system32 for win2000) folder which activates this virus. Renaming this file could also fix this problem.

go to location:

[HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel]

If isn't already there. Make a new key or change the existing one to:

"Homepage"=dword:00000000

If Hotbar was installed without your consent:

Go to Internet Options and then Advanced Tab. Uncheck where it says "Enable third-party browser extensions". Yes perfect definition of Hotbar.

I suggest you change via security settings tab to "prompt" or "disable" for ActiveX in future by clicking "custom". Anywhere it mentions ActiveX disable or prompt check them. Some sites do use them legit though. Most use it to install things like Hotbar.

About the DLLs of Hotbar also being installed not much you can do unless there is a proper uninstall feature. Use a DLL cleaner which looks at DLLs which are actually needed. Either that or you could go through the System folders right clicking each DLL to check its origins ;)

I have deleted everything else (HKey) through Regedit and it doesn't APPEAR anymore but i am worried it will still activate/reinstall having these files still on my pc.

I used Adaware (thanks for that tip!) and it WENT...i couldn't believe it...

HOWEVER, i now don't really know how to get into the quarentine folder to take out stuff I might want to keep (if any) or just make sure it is deleted. I have read the 'manual' and it isn't much help.

Also, does anyone know why the button for ad-watch won't work (flashes a message saying have to download separately, but the link to get the down load doesn't work).